Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/323830333a616335303a3a2f33322d3438203d3e20323733313433.roa
File:                     323830333a616335303a3a2f33322d3438203d3e20323733313433.roa (raw, json)
Hash identifier:          BDYr9h7KilCd0s7jmZx6J/Hxu7p4rnJlYZYnkpdLzR8=
Subject key identifier:   27:0E:E2:B8:B8:FD:2C:0E:39:09:70:DC:EC:37:FC:4B:45:52:E3:2B
Certificate issuer:       /CN=5359D5652EB8B1C42FF1914CA8586A67AE35A163
Certificate serial:       5E099C84C6C7E274F5C46B5E2CA828B4808A8718
Authority key identifier: 53:59:D5:65:2E:B8:B1:C4:2F:F1:91:4C:A8:58:6A:67:AE:35:A1:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/323830333a616335303a3a2f33322d3438203d3e20323733313433.roa
Signing time:             Thu 06 Jun 2024 21:55:00 +0000
ROA not before:           Thu 06 Jun 2024 21:50:00 +0000
ROA not after:            Thu 05 Jun 2025 21:55:00 +0000
asID:                     273143
IP address blocks:        2803:ac50::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:09:9c:84:c6:c7:e2:74:f5:c4:6b:5e:2c:a8:28:b4:80:8a:87:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5359D5652EB8B1C42FF1914CA8586A67AE35A163
        Validity
            Not Before: Jun  6 21:50:00 2024 GMT
            Not After : Jun  5 21:55:00 2025 GMT
        Subject: CN=270EE2B8B8FD2C0E390970DCEC37FC4B4552E32B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2c:c6:59:80:df:a9:39:c1:7e:3e:83:2f:51:
                    80:2f:fc:1f:b9:f3:29:28:af:c2:2d:02:dd:ab:ea:
                    f0:20:25:7e:18:86:d7:02:4a:00:7d:b1:05:eb:c4:
                    3e:fb:da:29:fa:f5:be:e6:33:fd:59:9f:0d:3a:e5:
                    01:0c:b9:48:59:51:a6:e8:a2:2d:35:a5:2d:fc:0d:
                    e2:e0:95:ee:f2:78:a5:7f:80:68:ae:b5:f6:36:d4:
                    02:1b:c3:2b:f6:fe:78:7f:e8:7e:d0:e0:b7:3e:b0:
                    89:70:5c:45:89:36:6e:77:2d:bd:57:67:63:fb:60:
                    d2:e1:8a:ce:ee:7c:a3:25:41:99:73:6c:a8:f4:65:
                    4f:ae:0d:05:16:ce:5d:4e:c0:d5:60:68:fb:ae:35:
                    9d:25:f3:fa:99:c9:72:2d:f9:e5:f6:55:6d:eb:10:
                    45:10:66:36:22:7f:84:e2:2e:d9:1c:eb:ca:16:0b:
                    52:6b:c0:c5:9f:04:31:35:cc:2d:d6:dc:00:63:b1:
                    44:bd:c8:1a:77:55:13:ab:ad:32:ed:5e:11:13:12:
                    d2:44:3a:24:7d:bc:73:7c:1d:c2:62:69:c7:c7:21:
                    f8:b3:99:5f:5f:31:61:99:b8:02:a1:06:0a:4b:45:
                    4d:67:95:a8:7a:12:66:74:e5:1f:53:b8:b4:96:43:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0E:E2:B8:B8:FD:2C:0E:39:09:70:DC:EC:37:FC:4B:45:52:E3:2B
            X509v3 Authority Key Identifier:
                keyid:53:59:D5:65:2E:B8:B1:C4:2F:F1:91:4C:A8:58:6A:67:AE:35:A1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/323830333a616335303a3a2f33322d3438203d3e20323733313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac50::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:f1:6b:f5:50:e2:af:3e:af:7b:1c:20:db:54:1f:a4:e5:a5:
         5a:fc:63:fe:ec:55:38:f5:0c:33:4f:10:b4:f3:3d:1c:1d:b2:
         fa:7e:f6:ed:ad:1b:3d:b3:45:ac:17:33:51:d3:c2:1c:14:04:
         c3:52:01:ef:74:d5:da:3f:f6:e5:8d:02:b0:40:c8:94:d4:c3:
         f4:23:f3:9b:78:d4:17:a9:5f:b0:24:d9:5b:61:58:d7:38:d7:
         57:6f:bb:0e:37:c3:0f:72:94:38:90:f1:0c:ee:c0:c6:50:c5:
         f4:fc:6b:f8:65:df:cc:d7:0d:b6:c0:bd:8a:31:de:f7:9e:02:
         4b:a8:4a:99:88:c7:04:88:96:46:16:42:fb:3d:77:c6:81:f7:
         e4:08:cd:8b:4f:46:3d:57:9f:e9:9b:32:a2:b6:fc:90:59:e1:
         1a:d5:1e:60:a2:5d:b3:0d:eb:61:44:74:23:8a:9c:3b:27:b7:
         02:c9:be:8a:ad:cc:81:fe:5f:44:7f:90:dd:e7:72:e7:91:8c:
         a3:8e:5b:83:de:75:9c:7a:89:cc:18:07:e1:21:60:3a:df:da:
         2b:df:1b:ff:24:6c:6a:11:3b:b5:b4:61:7b:93:1d:21:d0:4a:
         c3:11:cd:ca:a6:7e:be:d0:bd:1f:9d:1f:48:b9:9f:b2:36:af:
         63:d7:2f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:22 2024 by rpki-client on console-fra.rpki-client.org